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This paper briefly describes the AFSAM and 
discusses its security. It is concluded that 
subject to certain qualifications about pro- 
cedures for avoiding depth, the machine is 
secure for all classifications of traffic for 
at least the next three years. 
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1. Introduction 



ASSAM ifia. is an on- or off-line additive-producing trace -through rotor 
machine which has recently "been introduced far use in U.S, D/F and adminis- 
trative netvmrks. It is a conversion from a once-through version call M-294 
or SIGNIN (BALDER and PANDORA, cryptosystems). The machine and the associated 
cryptosystems (CENTaUE and IXIQN) are described and assessed in detail in 
HRUSA C/S 306 dated October I9th„ 1953* It is there concluded that the machine, 
when used with these procedures, is secure for all classifications of traffic 
fear at least the next 5 years. This paper 



(a) briefly describes the machine and the associated procedures, 
(h) discusses its security. 



2. Brief Description 
(a) The machine 
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11 inputs 
5+1=6 outputs 



There are 8 26-point non-revcrsiblc rotors selected fren a 10-rotor 
set. Each rotor has a fixed alphabet and an identical fixed 5-notch 
notchring. The rotors are pluggable but will not be replugged in the 
field. R1234 and R876 form cyclonetric cascades with R1 and 8 the fast 
rotors. R5 is a bump rotor driven by one of the 6 outputs as in ASAM 2-1. 
S, between R4 and 5 is a permanent scranb lc *^rir e& separator. The reflector 
is wired with 10 pairs and 2 triplets, as in ASAri 2-1, and the bey-pro- 
ducing arrangements are likevdse the same - 11 live inputs and 5 key out- 
puts. The key is added level by level to 5-unit plain text, and is never 
transmitted in clear. The flatness of the key is discussed in Note A, 
where it is also shown that there is a slight correlation between the key 
and the stepping of the bump rotor. 



(b) CENTAUR 

(i) Each pad consists of 120 pages which are assigned in blocks to 
stations on a net. Each page contains: (A) 4 rotor arrangements 
each of which has 20 tetranone designators from a sorxes which 
runs in order from 0001 to 9600 throughout the pad, (B) 176 
random 4-letter groups, each designated by a digraph; the digraphs 
range from AA to GT on each page and are arranged alphabetically. 
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(ii) An indicator consists of a tetranone giving the rotrr arrangement, 
and 2 digraphs giving the alignment (as shown on the same page as 
the tetrancne). Both tetranoraes ard. digraphs are creased off after 
use. 

(iii) For off-line use any unused tetranone can he used as an indicator. 
Messages are limited to 6,000 characters. For on-line use a rotor 
arrangement can he used only once, hut up to 20 necessary restarts 
throughout the 12-hour cryptoperiod may he made on the same arrange- 
ment. A restart may consist either of a new indicator or of a 
counter reset as in (iv) below. 

(iv) Counter reset. 

(a) Half duplex. A receive operator can cut off transmission if 
he is getting garble . The whole net grfes over to plain. The 
send operator stops on a random number of positions, not loss 
than 20, and transmits his character counter reading. 

(B) Duplex. The receive operator v/ho is getting garble sends BREAK 
0 ,, . on his send machine. He resets and sends his new counter 

Jpl 86-36/50 use 3605 roadln e ° n ^ send machine. 

(v) There is no letter check procedure. 

(c) IXIQN 

IXION is like CENTaUR except that (i) there are about 200 pages to a pad 
and (ii) the tetranone s are replaced by trigraphs which are arranged 
alphabetically only within a single rotor arrangement. 

(d) CENTAUR is the normal procedure, IXION will only be used when T/A con- 
siderations warrant it. 
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(b) CENTAUR and. IXIOM arc adequate far all classifications up to Secret. 
There is a very snail chance of readable depth however (sec para. 3(e) 
(i\ (ii) and (iii));if CEOTAUR and IXION are used for Top Secret 
traffic this risk must be accepted by the users. 

(c) The procedure should be examined to ensure that there is no danger 
of depth as a result of 3(d)(v) (B) and (c) above. 
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NOTE A 

Key properties 

5. (a) In each stream the probability of cross is 

20 . 11_ + 6 (l - 14.13 ) = 649 

25 25 2 5 ( 25.24) 1,300 

(b) Counted characterise the key is a bit rougher than this, but not 
seriously so. The calculation is lengthy and only the results are 
quoted here. 




(c) All-dot is thus the most popular character. However approximately 
86,800 key characters arc needed before it can be expected to exceed 
its expected frequency in random material by 2 standard deviations. 

6. Bump rotor stepping 

The probabilities have only been calculated for the two extreme cases: 

Key Probability that bu,.ip rotor steps 

All dot .490 

All cross .499 

A correlation of this order of size has no effect upon the security of 
the machine. In the case of the other 30 key characters the correlation 
will bo smaller still. 
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The results of a count of 20,000 characters of ASAM 2-1 key are attached 
Although the figures are consistent \7ith the theoretical ones the sample 
size is too snail to giva a significantly close correlation. 
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